update using renovate

.github/workflows/update.yaml

@@ -1,26 +0,0 @@
-name: update-flake-lock
-on:
-  workflow_dispatch: # allows manual triggering
-  schedule:
-    - cron: "3 18 * * *"
-jobs:
-  lockfile:
-    runs-on: ubuntu-latest
-    steps:
-      - run: sh <(curl -L https://nixos.org/nix/install) --daemon
-      - name: Checkout repository
-        uses: actions/checkout@v4
-      - name: update flake lock
-        run: nix flake update
-      - name: run update script
-        run: |
-          cd packages
-          yes "" | ./update.sh
-      - name: run nix fmt
-        run: nix fmt
-      - name: Commit and push
-        uses: https://github.com/peter-evans/create-pull-request@v7
-        with:
-          commit-message: "Automatic Update"
-          title: Run automatic update
-          author: GitHub <noreply@github.com>

config/services/renovate.nix

@@ -17,7 +17,11 @@
       nix.enabled = true;
       lockFileMaintenance.enabled = true;
       osvVulnerabilityAlerts = true;
-      allowedPostUpgradeCommands = ["^cargo2nix -o$" "^alejandra \\.$"];
+      allowedPostUpgradeCommands = [
+        "^cargo2nix -o$"
+        "^alejandra \\.$"
+        "^cd packages; yes '' | \\./update.sh$"
+      ];
       allowCustomCrateRegistries = true;
     };
     credentials = {

renovate.json

@@ -0,0 +1,16 @@
+{
+    "extends": [
+        "config:best-practices",
+        "schedule:automergeDaily",
+        "schedule:daily"
+    ],
+    "postUpgradeTasks": {
+        "commands": [
+            "cd packages; yes '' | ./update.sh",
+            "alejandra ."
+        ],
+        "fileFilters": [
+            "packages/**/*"
+        ]
+    }
+}